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DETAILED ACTION 

1 . A response was received on 16 October 2008. By this response, Claims 5, 15, 
and 57 have been amended. No claims have been added or canceled. Claims 1-3, 5, 
7-11, 15-22, and 57 are currently pending in the present application. 

Response to Arguments 

2. Applicant's arguments filed 16 October 2008 have been fully considered but they 
are not persuasive. 

Claims 1 -3, 5, 7-1 1 , and 1 5-1 7 were rejected under 35 U.S.C. 1 03(a) as 
unpatentable over Schneier et al, US Patent 5768382, in view of Christiano, US Patent 
5671412, Stefik et al, US Patent 5629980, and Peinado et al, US Patent 7103574. 
Claims 18-22 were rejected under 35 U.S.C. 103(a) as unpatentable over Schneier in 
view of Christiano, Stefik, and Peinado, and further in view of Castor et al, US Patent 
5590288. Claim 57 was rejected under 35 U.S.C. 103(a) as unpatentable over 
Christiano in view of Stefik and Peinado. 

In response to applicant's arguments against the references individually, one 
cannot show nonobviousness by attacking references individually where the rejections 
are based on combinations of references. See In re Keller, 642 F.2d 413, 208 
USPQ 871 (CCPA 1981); In re Merck & Co., 800 F.2d 1091, 231 USPQ 375 (Fed. Cir. 
1986). 
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Specifically, with reference to the above rejections in general and with specific 
reference to independent Claim 1 , Applicant argues that Peinado does not disclose 
generating hash values of content key data or usage control policy data and that any 
signature data in Peinado is not created using such hash values (see pages 13-14 of 
the present response). The Examiner respectfully disagrees. It is clear from the cited 
portions of Peinado that the digital signature which is included within the license 
described therein is a digital signature on at least the content decryption key and the 
usage control data (see column 2, lines 57-64 and column 20, line 38-column 21, line 
21 , especially column 20, lines 59-62, where the signature is explicitly described, the 
decryption key KD corresponds to the content key, and the license DRL which includes 
rights descriptions and/or terms and conditions of the license clearly corresponds to the 
usage control data). It is well known that a digital signature can be created first by 
generating hash values of the data to be signed, and then performing public key 
encryption on those hash values. See also Schneier, column 9, line 40-column 10, line 
56, describing digital signatures as well known in the art, and also Peinado, column 28, 
line 1 -column 30, line 36, showing sample licenses, noting more specifically column 28, 
lines 57-64, and column 29, lines 38-45, showing the signatures of the respective 
sample licenses, and column 30, lines 22-36, describing fields of the signatures 
including the hash algorithm and signature algorithms used. 

Therefore, the Examiner submits that Peinado does disclose a hash value 
generating circuit that generates a hash value of the content key and policy data and a 
public key encryption circuit that creates and verifies signature data using the hash 
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(again, see Peinado, column 2, line 65, and column 20, line 38-column 21, line 12, as 
previously cited), and this in combination with the disclosures of Schneier, Christiano, 
and Stefik renders obvious the claimed invention (see, for example, Schneier, column 9, 
lines 40-61 , column 17, lines 46-50, disclosing generation of hash values of content 
data, and column 10, lines 41-56 that further disclose a public key encryption circuit 
creating signature data using hash values of the content data and verifying the integrity 
of the signature data; see also Stefik, column 26, line 65-column 27, line 9, and column 
51, lines 9-12, generally disclosing public key encryption circuits creating signature 
data, all as previously cited). In particular, it is noted that it would be obvious to modify 
the disclosures of, for example, Schneier, that teach generating hash values and 
signature data of content data (again, see Schneier, column 9, lines 40-61; column 17, 
lines 46-50; and column 10, lines 41-56) to also generate hash values and signature 
data based on the key and usage policy data as taught by Peinado (again, see Peinado, 
column 2, line 65; and column 20, line 38-column 21, line 12) in order to maintain the 
integrity of all of those items and prevent alteration of the key or usage policy data 
and/or prevent unauthorized decryption of content (again see Peinado, column 25, lines 
53-59; see also Schneier, column 9, line 40-column 10, line 67). It is additionally noted 
that the disclosure of Peinado at least suggests, in itself, that hash values and signature 
data are also generated from the content itself (noting column 25, lines 41-59, where 
the signature validation also prevents alteration of the digital content, thus at least 
suggesting that the digital content can be signed as well). 
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It is noted that the present claims do not specify that all of the items (content 
data, content key, and usage control policy data) are combined into a single hash value 
or signature (noting that the language of Claim 1 , for example, only specifies that the 
circuit "generates hash values", plural) and therefore the generation of separate hash 
values of the content data, as in Schneier (as cited above), and of the key and usage 
policy data, as in Peinado (as cited above), is seen to be sufficient disclosure of the 
claimed limitations of generation of hash values of the content data, content key, and 
usage control policy data and the creation of signature data using those hash values 
(see, for example, Claim 1). 

Therefore, for the reasons detailed above, the Examiner maintains the rejections 
as set forth below. 

Claim Objections 

3. The objection to Claim 57 for informalities is withdrawn in light of the 
amendments to the claim. 

Claim Rejections - 35 USC §112 

4. The rejection of Claims 5 and 1 5 under 35 U.S.C. 1 1 2, second paragraph, as 
indefinite is withdrawn in light of the amendments to the claims. 
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Claim Rejections - 35 USC § 103 

5. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

6. Claims 1-3, 5, 7-11, and 15-17 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Schneier et al, US Patent 5768382, in view of Christiano, US Patent 
5671412, Stefik et al, US Patent 5629980, and Peinado et al, US Patent 7103574. 

In reference to Claim 1 , Schneier discloses an apparatus within a tamper- 
resistant circuit module (column 8, lines 17-27; column 11, lines 31-37) including a first 
bus (see Figures 4C-4H); an arithmetic processing circuit (Figure 4C, CPU 302); a 
storage circuit (Figure 4C, ROM 304); a second bus (see Figures 4C-4H); an interface 
circuit (see Figure 4C); an encryption processing circuit (Figure 4B-4C, 
encryption/decryption module 28; also column 11, lines 41-46); a hash value generating 
circuit that generates hash values of content data (column 9, lines 40-61 ; column 1 7, 
lines 46-50); a public key encryption circuit (column 10, lines 27-56) that creates 
signature data using hash values and verifies the integrity of the signature data (column 
10, lines 41-56; column 9, lines 40-61); a common key encryption circuit (column 9, line 
62-column 10, line 11); and an external bus interface circuit (Figure 4C, I/O 312). 
However, Schneier does not explicitly disclose determining a mode based on a handling 
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policy and creating log data, nor does Schneier disclose creating usage control status 
data or controlling the use of the content data. 

Christiano discloses determining a usage or purchase mode based on a usage 
license policy (column 6, line 60-column 7, line 30) and logging data (column 18, lines 
53-61 ), where the log data includes a unique identifier of content data (column 1 8, lines 
53-61), discount information (column 17, lines 35-54, and column 18, lines 53-61), and 
tracing information (column 18, lines 53-61, and column 6, line 60-column 7, line 46). 
Christiano further discloses creating usage control status data (column 10, lines 53-57) 
that includes a content identification (column 10, lines 27-33), the purchase mode 
(column 10, line 53-column 11, line 11), identification of a circuit module (column 10, 
lines 33-36), and a user identification (column 10, lines 53-57; column 6, lines 64- 
column 7, line 1; column 4, line 61 -column 5, line 2). Christiano additionally discloses 
controlling use of content data (column 1 0, line 64-column 1 1 , line 3) and a usage 
monitor that monitors the usage control policy and status data to ensure that content 
data is properly used based on a license (column 6, line 60-column 7, line 46; column 
10, lines 53-57). Therefore, it would have been obvious to one of ordinary skill in the art 
at the time the invention was made to modify the apparatus of Schneier by including the 
usage policies and licensing as disclosed by Christiano, in order to provide a variety of 
options and flexibility in controlling usage of licensed data (see Christiano, column 3, 
lines 12-19). 

Although Schneier and Christiano disclose a purchase mode (see Christiano, 
column 1 0, line 53-column 1 1 , line 1 1 ), neither Schneier nor Christiano explicitly 
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discloses that the purchase mode is determined from one or more purchase mode 
options, each having a different level of restriction imposed on a playback operation. 
Stefik discloses a system for controlling distribution and use of digital works that 
includes a plurality of purchase modes (see Stefik, column 17, line 63-column 26, line 
35; more specifically, see column 17, line 64-column 18, line 6; column 19, lines 20-31, 
describing limitations on number of copies, fees, and times; column 19, lines 46-57, 
where rights defining playing and printing of a work are described; column 21, lines 10- 
24, defining limitations on a number of copies to be made; see also column 43, line 45- 
column 50, line 14, defining various use scenarios) each having a different level of 
restriction imposed on a playback operation (see again column 17, line 63-column 26, 
line 35, for a variety of rights, and column 43, line 45-column 50, line 14, for a variety of 
use scenarios; see also column 36, lines 30-64, where limitations are checked for a 
playback operation). Stefik also discloses generating log data (column 34, lines 25-34), 
where the data can include a unique identifier of the content data (column 9, lines 56- 
66, and Figure 7), discount information (Stefik, column 23, line 44-column 25, line 8), 
and tracing information (column 48, lines 20-26), and the data can further indicate a 
result of the determined mode (see again column 17, line 63-column 26, line 35, and 
column 43, line 45-column 50, line 14, noting, in particular, for example, column 45, 
lines 33-47). Stefik additionally discloses a public key encryption circuit (column 26, line 
65-column 27, line 9) that creates signature data (column 51 , lines 9-12), and also 
discloses a common key encryption module (column 42, lines 6-21). Therefore, it would 
have been obvious to one of ordinary skill in the art at the time the invention was made 
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to modify the apparatus of Schneier and Christiano by including a plurality of purchase 
modes each imposing different restrictions on playback, in order to allow the owner of a 
digital work to attach to the work usage rights defining how the work may be used 
and/or distributed (see Stefik, column 3, lines 51-61). 

Further, although Schneier, Christiano, and Stefik disclose a hash value 
generating circuit that generates a hash value of content data (Schneier, column 9, lines 
40-61; column 17, lines 46-50), none of Schneier, Christiano, or Stefik explicitly 
discloses also generating a hash value of the key data and usage control policy data. 
Peinado discloses a system in which a license for digital content includes the content 
key and usage control policy data (column 2, lines 57-64) and that has a hash value 
generating circuit that generates a hash value of the content key and policy data and a 
public key encryption circuit that creates and verifies signature data using the hash 
(column 2, line 65; column 20, line 38-column 21, line 12). Therefore, it would have 
been obvious to one of ordinary skill in the art at the time the invention was made to 
further modify the apparatus of Schneier, Christiano, and Stefik, to also compute a hash 
and generate a signature based on the key and usage policy data, in order to maintain 
the integrity of those items and prevent alteration of the key or usage policy data and/or 
prevent unauthorized decryption of content (see Peinado, column 25, lines 53-59) as is 
well known in the art (see also Schneier, column 9, line 40-column 10, line 67). 

In reference to Claim 2, Schneier as modified above further discloses a second 
interface circuit and that the first bus includes a third bus and a fourth bus (see 
Schneier, Figures 4C-4H). 
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In reference to Claim 3, Schneier as modified above further discloses a third 
interface circuit communicating with a recording medium (see Schneier, Figure 4H, 
interface circuitry 406), a fifth bus, and a fourth interface circuit (see Schneier, Figures 
4C-4H). 

In reference to Claim 5, Schneier as modified above further discloses that the 
storage circuit stores private and public key data (see Schneier, column 1 1 , lines 44- 
48), the public key encryption circuit verifies the integrity of signature data and creates 
signature data (see Schneier, column 10, lines 41-56; Stefik, column 51, lines 9-12; 
Peinado, column 2, line 65, for example), and the common key encryption circuit 
encrypts and decrypts content data and key data using a session key (Schneier, column 
9, line 65-column 10, line 6; Stefik, column 42, lines 6-21). 

In reference to Claim 7, Schneier as modified above further discloses a random 
number generating circuit (see Schneier, column 10, lines 57-67). 

In reference to Claim 8, Schneier as modified above further discloses an external 
storage circuit (see Schneier, column 7, lines 57-60). 

In reference to Claims 9 and 1 1 , Schneier as modified above discloses 
everything as applied to Claim 8 above. Schneier as modified above further discloses 
that programs are executed from memory in a conventional manner (see Schneier, 
column 7, lines 60-61). However, neither Schneier, Christiano, Stefik, nor Peinado 
explicitly discloses a storage-circuit control circuit or a storage management circuit. 
Official notice is taken that it is well known in the computer arts to include a memory 
controller or memory management circuit, such as a DMA or MMU, in order to allow for 
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the optimization of the use of memory. Therefore, it would have been obvious to one of 
ordinary skill in the art at the time the invention was made to modify the apparatus of 
Schneier, Christiano, Stefik, and Peinado by including a memory controller or manager, 
in order to optimize the use of memory, as is well known in the computer arts. 

In reference to Claim 10, Schneier as modified above further discloses that the 
external bus is connected to a host processor (see Schneier, Figure 4C, where the I/O 
312 is connected to external CPU 27). 

In reference to Claim 15, Schneier as modified above further discloses further 
disclose a real time clock (see Schneier, column 1 1 , line 46). Further, Schneier, 
Christiano, and Stefik disclose encrypting key data and control data (see Christiano, 
column 14, lines 23-28) and storing license key data (Christiano, column 14, lines 19- 
21). 

In reference to Claim 16, Schneier as modified above further discloses further 
disclose that the storage circuit writes and erases data in units of blocks and also 
discloses a write lock control circuit for controlling writing and erasing blocks of data 
(see Schneier, column 18, lines 39-43). 

In reference to Claim 17, Schneier discloses an apparatus within a tamper- 
resistant circuit module (column 8, lines 17-27; column 11, lines 31-37) including a first 
bus (see Figures 4C-4H); an arithmetic processing circuit (Figure 4C, CPU 302); a 
storage circuit (Figure 4C, ROM 304); a second bus (see Figures 4C-4H); an interface 
circuit (see Figure 4C); an encryption processing circuit (Figure 4B-4C, 
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encryption/decryption module 28; also column 11, lines 41-46); a hash value generating 
circuit that generates hash values of content data (column 9, lines 40-61 ; column 1 7, 
lines 46-50); a public key encryption circuit (column 10, lines 27-56) that creates 
signature data using hash values and verifies the integrity of the signature data (column 
10, lines 41-56; column 9, lines 40-61); a common key encryption module (column 9, 
line 62-column 10, line 11); and an external bus interface circuit (Figure 4C, I/O 312). 
Schneier further discloses receiving an interrupt from an external circuit, performing 
processing, and reporting a result of the processing (column 11, lines 55-67). However, 
Schneier does not explicitly disclose determining a mode based on a handling policy 
and creating log data, nor does Schneier disclose creating usage control status data or 
controlling the use of the content data. 

Christiano discloses determining a usage or purchase mode based on a usage 
license policy (column 6, line 60-column 7, line 30) and logging data (column 18, lines 
53-61 ), where the log data includes a unique identifier of content data (column 1 8, lines 
53-61), discount information (column 17, lines 35-54, and column 18, lines 53-61), and 
tracing information (column 18, lines 53-61, and column 6, line 60-column 7, line 46). 
Christiano further discloses creating usage control status data (column 10, lines 53-57) 
that includes a content identification (column 10, lines 27-33), the purchase mode 
(column 10, line 53-column 11, line 11), identification of a circuit module (column 10, 
lines 33-36), and a user identification (column 10, lines 53-57; column 6, lines 64- 
column 7, line 1; column 4, line 61 -column 5, line 2). Christiano additionally discloses 
controlling use of content data (column 1 0, line 64- column 1 1 , line 3) and a usage 
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monitor that monitors the usage control policy and status data to ensure that content 
data is properly used based on a license (column 6, line 60-column 7, line 46; column 
10, lines 53-57). Therefore, it would have been obvious to one of ordinary skill in the art 
at the time the invention was made to modify the apparatus of Schneier by including the 
usage policies and licensing as disclosed by Christiano, in order to provide a variety of 
options and flexibility in controlling usage of licensed data (see Christiano, column 3, 
lines 12-19). 

Although Schneier and Christiano disclose a purchase mode (see Christiano, 
column 1 0, line 53-column 1 1 , line 1 1 ), neither Schneier nor Christiano explicitly 
discloses that the purchase mode is determined from one or more purchase mode 
options, each having a different level of restriction imposed on a playback operation. 
Stefik discloses a system for controlling distribution and use of digital works that 
includes a plurality of purchase modes (see Stefik, column 17, line 63-column 26, line 
35; more specifically, see column 17, line 64-column 18, line 6; column 19, lines 20-31, 
describing limitations on number of copies, fees, and times; column 19, lines 46-57, 
where rights defining playing and printing of a work are described; column 21, lines 10- 
24, defining limitations on a number of copies to be made; see also column 43, line 45- 
column 50, line 14, defining various use scenarios) each having a different level of 
restriction imposed on a playback operation (see again column 17, line 63-column 26, 
line 35, for a variety of rights, and column 43, line 45-column 50, line 14, for a variety of 
use scenarios; see also column 36, lines 30-64, where limitations are checked for a 
playback operation). Stefik also discloses generating log data (column 34, lines 25-34), 
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where the data can include a unique identifier of the content data (column 9, lines 56- 
66, and Figure 7), discount information (Stefik, column 23, line 44-column 25, line 8), 
and tracing information (column 48, lines 20-26), and the data can further indicate a 
result of the determined mode (see again column 17, line 63-column 26, line 35, and 
column 43, line 45-column 50, line 14, noting, in particular, for example, column 45, 
lines 33-47). Stefik additionally discloses a public key encryption module (column 26, 
line 65-column 27, line 9) that performs authentication (column 17, lines 36-47), creates 
signature data (column 51, lines 9-12), encrypts and decrypts data (column 26, line 65- 
column 27, line 29), and shares session key data (column 42, lines 6-21), and also 
discloses a common key encryption module (column 42, lines 6-21) that performs 
mutual authentication (column 17, lines 36-47) and encrypts and decrypts data with the 
session key (column 42, lines 6-21). Therefore, it would have been obvious to one of 
ordinary skill in the art at the time the invention was made to modify the apparatus of 
Schneier and Christiano by including a plurality of purchase modes each imposing 
different restrictions on playback, in order to allow the owner of a digital work to attach 
to the work usage rights defining how the work may be used and/or distributed (see 
Stefik, column 3, lines 51-61). 

Further, although Schneier, Christiano, and Stefik disclose a hash value 
generating circuit that generates a hash value of content data (Schneier, column 9, lines 
40-61; column 17, lines 46-50), none of Schneier, Christiano, or Stefik explicitly 
discloses also generating a hash value of the key data and usage control policy data. 
Peinado discloses a system in which a license for digital content includes the content 
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key and usage control policy data (column 2, lines 57-64) and that has a hash value 
generating circuit that generates a hash value of the content key and policy data and a 
public key encryption circuit that creates and verifies signature data using the hash 
(column 2, line 65; column 20, line 38-column 21, line 12). Therefore, it would have 
been obvious to one of ordinary skill in the art at the time the invention was made to 
further modify the apparatus of Schneier, Christiano, and Stefik, to also compute a hash 
and generate a signature based on the key and usage policy data, in order to maintain 
the integrity of those items and prevent alteration of the key or usage policy data and/or 
prevent unauthorized decryption of content (see Peinado, column 25, lines 53-59) as is 
well known in the art (see also Schneier, column 9, line 40-column 10, line 67). 

7. Claims 18-22 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Schneier in view of Christiano, Stefik, and Peinado as applied to claim 17 above, and 
further in view of Castor et al, US Patent 5590288. 

In reference to Claims 18 and 19, Schneier as modified above discloses 
everything as applied to Claim 17 above. However, Schneier as modified above does 
not explicitly disclose reporting the result of processing by outputting an interrupt. 
Further, Schneier as modified above does not explicitly disclose that the external bus 
interface includes a common memory and that the external circuit obtains a result by 
polling. 

Castor discloses a system which allows a computer to request another computer 
to execute a procedure (column 3, lines 38-42) including outputting an interrupt (column 
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12, lines 29-33). Castor further discloses a common memory (the buffer of column 12, 
lines 33-35) and polling an interface circuit to obtain a result (column 12, lines 35-47). 
Therefore, it would have been obvious to one of ordinary skill in the art at the time the 
invention was made to modify the apparatus of Schneier as modified above by including 
the interrupt, buffer, and polling of Castor, in order to increase reliability, lower cost, and 
allow easier upgrades in a distributed computing system (Castor, column 4, lines 11- 
21). 

In reference to Claim 20, Schneier as modified above further discloses first status 
registers including flags (see Castor, column 12, lines 29-35). 

In reference to Claim 21 , Schneier as modified above further discloses storing 
and executing an interrupt program (see Castor, column 5, lines 49-51). 

In reference to Claim 22, Schneier as modified above further discloses storing 
and executing a plurality of interrupt programs and subroutines (see Castor, column 5, 
lines 49-55). 

8. Claim 57 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Christiano in view of Stefik and Peinado. 

Christiano discloses a method including determining a usage or purchase mode 
based on a usage license policy (column 6, line 60-column 7, line 30); creating log data 
(column 18, lines 53-61) that includes a unique identifier of content data (column 18, 
lines 53-61), discount information (column 17, lines 35-54, and column 18, lines 53-61), 
and tracing information (column 18, lines 53-61, and column 6, line 60-column 7, line 
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46).; creating usage control status data (column 10, lines 53-57) that includes a content 
identification (column 10, lines 27-33), the purchase mode (column 10, line 53-column 
11, line 11), identification of a circuit module (column 10, lines 33-36), and a user 
identification (column 10, lines 53-57; column 6, lines 64-column 7, line 1; column 4, line 
61 -column 5, line 2); monitoring usage control policy and status data to ensure that 
content data is properly used based on a license (column 6, line 60-column 7, line 46; 
column 1 0, lines 53-57); controlling use of content data (column 1 0, line 64- column 1 1 , 
line 3); recording the content data (column 10, lines 62-64, where the product is used on 
a computer system, and therefore stored at least temporarily therein; see also column 6, 
lines 28-31, where various storage media are disclosed); performing authentication 
(column 1 1 , lines 21-30; column 1 1 , line 57-column 1 2, line 32); and encrypting key 
data and control data (column 14, lines 23-28). However, although Christiano discloses 
a purchase mode (see Christiano, column 1 0, line 53-column 1 1 , line 1 1 ), Christiano 
does not explicitly disclose that the purchase mode is determined from one or more 
purchase mode options, each having a different level of restriction imposed on a 
playback operation, nor does Christiano explicitly disclose creating a signature or 
sharing a session key. 

Stefik discloses a method for controlling distribution and use of digital works that 
includes a plurality of purchase modes (see Stefik, column 17, line 63-column 26, line 
35; more specifically, see column 17, line 64-column 18, line 6; column 19, lines 20-31, 
describing limitations on number of copies, fees, and times; column 19, lines 46-57, 
where rights defining playing and printing of a work are described; column 21, lines 10- 



Application/Control Number: 09/741 ,668 Page 1 8 

Art Unit: 2437 

24, defining limitations on a number of copies to be made; see also column 43, line 45- 
column 50, line 14, defining various use scenarios) each having a different level of 
restriction imposed on a playback operation (see again column 17, line 63-column 26, 
line 35, for a variety of rights, and column 43, line 45-column 50, line 14, for a variety of 
use scenarios; see also column 36, lines 30-64, where limitations are checked for a 
playback operation). Stefik also discloses generating log data (column 34, lines 25-34), 
where the data can include a unique identifier of the content data (column 9, lines 56- 
66, and Figure 7), discount information (Stefik, column 23, line 44-column 25, line 8), 
and tracing information (column 48, lines 20-26), and the data can further indicate a 
result of the determined mode (see again column 17, line 63-column 26, line 35, and 
column 43, line 45-column 50, line 14, noting, in particular, for example, column 45, 
lines 33-47). Stefik additionally discloses performing authentication (column 17, lines 
36-47), creating signature data (column 51, lines 9-12), sharing session key data 
(column 42, lines 6-21), and encrypting data using the session key data (column 42, 
lines 6-21 ). Therefore, it would have been obvious to one of ordinary skill in the art at 
the time the invention was made to modify the method of Christiano by including a 
plurality of purchase modes each imposing different restrictions on playback, in order to 
allow the owner of a digital work to attach to the work usage rights defining how the 
work may be used and/or distributed (see Stefik, column 3, lines 51-61). 

Further, although Christiano and Stefik generally disclose signature data (Stefik, 
column 51, lines 9-12), neither Christiano nor Stefik explicitly discloses generating a 
hash value of the content data, key data, and usage control policy data, or creating 
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signature data using the hash values and then verifying the integrity of the signature 
data. Peinado discloses a method in which a license for digital content includes the 
content key and usage control policy data (column 2, lines 57-64), and that the method 
includes generating a hash value of the content data, content key, and policy data, and 
creating and verifying signature data using the hash (column 2, line 65; column 20, line 
38-column 21, line 12; column 25, lines 41-59). Therefore, it would have been obvious 
to one of ordinary skill in the art at the time the invention was made to further modify the 
method of Christiano and Stefik to compute a hash and generate a signature based on 
the key and usage policy data, in order to maintain the integrity of those items and 
prevent alteration of the key or usage policy data and/or prevent unauthorized 
decryption of content (see Peinado, column 25, lines 53-59). It would further have been 
obvious to include computation of a hash and generation of a signature of the content 
data itself, in order to prevent alteration of the content data itself (see Peinado, column 
25, lines 53-59) as is well known in the art. 

Conclusion 

9. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
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mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Zachary A. Davis whose telephone number is (571)272- 
3870. The examiner can normally be reached on weekdays 8:30-6:00, alternate 
Fridays off. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Emmanuel Moise can be reached on (571) 272-3865. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/ZAD/ 

Examiner, Art Unit 2437 



/Emmanuel L. Moise/ 

Supervisory Patent Examiner, Art Unit 2437 



